Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa
File:                     4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa (raw, json)
Hash identifier:          8s3f0OHNiiGysNBKrboHftbs90Wc60F0UqCoKCIP8Gc=
Subject key identifier:   57:23:92:95:C0:DF:63:9E:03:EC:FD:DF:03:6A:2E:14:3D:D2:1F:6D
Certificate issuer:       /CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
Certificate serial:       04FC3D
Authority key identifier: 84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa
Signing time:             Mon 25 Apr 2022 22:27:49 +0000
ROA not before:           Sun 24 Apr 2022 03:00:00 +0000
ROA not after:            Fri 31 Jan 2025 03:00:00 +0000
asID:                     23059
IP address blocks:        2801:114:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326717 (0x4fc3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464aaf9d70c216551b1b619bc4c8573c3b3e1b52
        Validity
            Not Before: Apr 24 03:00:00 2022 GMT
            Not After : Jan 31 03:00:00 2025 GMT
        Subject: CN=4c1ec15d700a0511abbdad1d133dfedd6fb5f411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:23:1b:2f:f0:4d:9d:a8:28:39:a2:d1:a0:55:
                    8f:e9:5f:56:0b:4b:58:f5:24:5f:73:98:98:45:f5:
                    26:1b:af:7a:99:89:22:e4:09:48:1c:66:0f:78:c7:
                    f1:f3:20:47:53:5c:5e:0d:38:c4:64:a8:d7:09:13:
                    e4:00:1f:64:a2:f6:f4:58:bb:0b:b7:33:59:7c:22:
                    b8:2b:f7:8c:0a:2d:95:a4:09:4a:42:7f:eb:41:09:
                    a9:86:67:4a:da:8e:43:b8:46:7d:2b:23:df:e4:51:
                    76:75:28:27:63:ac:ad:47:23:90:4e:74:0a:10:73:
                    43:fa:1c:1d:b1:e0:53:45:74:54:15:47:f4:25:46:
                    5c:80:20:13:03:d0:64:63:ac:b2:c4:ed:b3:1f:1b:
                    b2:96:26:4c:68:1b:03:15:44:f2:9e:84:e4:83:72:
                    2b:76:8b:91:47:1b:62:b6:14:1e:1d:f2:12:1c:60:
                    03:e8:a8:40:f3:86:21:b2:6f:8e:8d:a2:db:68:68:
                    49:c4:a2:f9:f6:92:79:bf:a7:0b:73:5f:95:0f:c5:
                    57:da:01:38:10:20:1c:48:39:fc:03:fc:ce:f2:f0:
                    2b:66:d3:2e:9e:b3:4b:be:0a:8a:85:c2:26:a2:e6:
                    2c:e5:ea:e7:6c:86:ee:33:af:12:7e:f7:de:c0:cc:
                    bd:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:23:92:95:C0:DF:63:9E:03:EC:FD:DF:03:6A:2E:14:3D:D2:1F:6D
            X509v3 Authority Key Identifier:
                keyid:84:A6:F0:56:F6:32:74:33:FF:4F:DC:50:D9:F3:B2:D8:C5:CF:FE:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/4c1ec15d700a0511abbdad1d133dfedd6fb5f411.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/7eaff89a-857a-4870-812c-7a574de16b26/464aaf9d70c216551b1b619bc4c8573c3b3e1b52.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:114:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:8e:52:d5:23:bc:46:80:13:f6:46:cf:8e:97:10:b2:6b:7a:
         1f:08:32:17:35:65:70:72:c2:1a:50:7b:bf:99:eb:97:39:37:
         3a:54:85:64:68:26:c5:47:cc:a4:f6:ec:17:6d:7f:da:8b:33:
         55:84:12:18:35:3d:b5:59:11:ec:ad:f4:7e:bb:60:62:f9:06:
         da:dd:ee:11:20:d2:a9:5e:10:cd:05:73:c9:25:17:88:38:4e:
         28:3b:7c:6a:4c:30:5c:06:2e:f2:43:dd:eb:29:e3:4b:c7:3c:
         86:a6:6a:2b:c6:36:e2:0c:69:93:27:04:26:f5:63:b5:27:45:
         38:6e:f9:89:22:e5:6e:ad:87:0e:1e:51:77:fd:4b:95:d2:28:
         86:cb:2f:ef:79:4d:fe:8b:57:21:74:80:00:cc:ba:da:b4:0f:
         fe:9b:36:ee:a3:ba:34:ba:23:b5:63:a2:bd:56:80:be:83:ca:
         86:29:8c:a7:81:22:87:c3:1b:a0:28:a5:3c:b9:2c:a1:74:1c:
         dc:03:32:28:66:fa:bc:bb:df:0e:d1:37:cb:2d:4e:0a:f4:61:
         98:0b:c5:fe:e2:7b:83:c0:c6:b7:cf:12:f0:c6:ef:81:ea:c4:
         a4:bf:b2:4a:fc:f7:a5:a3:83:eb:d6:90:c2:c4:63:aa:72:e7:
         9c:73:8f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----